profile: password change validation